Malicious code in cb-serverless-plugins (npm)

The package cb-serverless-plugins was found to contain malicious code...